refactor: prepared trusted publishing (#5279)

* refactor: Remove NPM_TOKEN from `publish-npm.js`

Removed NPM_TOKEN usage for authentication in publish script, as we'd like to switch to trusted publishing.

* Remove NPM_TOKEN from publish workflow

* Update scripts/github/publish-npm.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Nicolas Merget <104347736+nmerget@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: 3 people

.github/workflows/03-publish-packages.yml

@@ -43,4 +43,3 @@ jobs:
           RELEASE: ${{ inputs.release }}
           PRE_RELEASE: ${{ inputs.preRelease }}
           VALID_SEMVER_VERSION: ${{ inputs.version }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

scripts/github/publish-npm.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { execSync } from 'node:child_process';
 
-const { VALID_SEMVER_VERSION, NPM_TOKEN } = process.env;
+const { VALID_SEMVER_VERSION } = process.env;
 const RELEASE = process.env.RELEASE === 'true';
 const PRE_RELEASE = process.env.PRE_RELEASE === 'true';
 
@@ -80,8 +80,7 @@ for (const REGISTRY of registries) {
 
 	if (REGISTRY === 'NPM') {
 		execSync('npm config set @db-ux:registry https://registry.npmjs.org/');
-		execSync(`npm set //registry.npmjs.org/:_authToken ${NPM_TOKEN}`);
-		console.log('🔑 Authenticated with NPM');
+		console.log('🔑 Using trusted publishing for NPM');
 	} else {
 		console.error(`Could not authenticate with ${REGISTRY}`);
 		process.exit(1);